Method and system for enhancing security in wireless stations of a local area network (LAN)

Abstract

Aspects for enhancing security in wireless stations of a local area network (LAN) are described. The aspects include utilizing a smart card to store sensitive data in a wireless station accessing a host in a wireless local area network (WLAN). Further included is providing a cryptographic token interface in the host for performing cryptographic operations with the sensitive data from the wireless station.

1 . A method for enhancing security in wireless stations of a local area network (LAN), the method comprising: 
 utilizing a smart card to store sensitive data in a wireless station connected on a host which accesses a wireless local area network (WLAN); and    providing a cryptographic token interface in the host for performing cryptographic operations with the sensitive data from the wireless station.    
     
     
         2 . The method of  claim 1  wherein utilizing a smart card to store sensitive data further comprises storing sensitive data of a chosen authentication method for the WLAN.  
     
     
         3 . The method of  claim 2  wherein storing sensitive data further comprises storing a supplicant private key, storing a public key of a root certificate authority, and storing a premaster secret for an EAP-TLS authentication method.  
     
     
         4 . The method of  claim 2  wherein storing sensitive data further comprises storing static WEP keys and a preshared key (PSK) for non-enterprise WLANs.  
     
     
         5 . The method of  claim 1  further comprising utilizing random number generation on the smart card.  
     
     
         6 . The method of  claim 1  further comprising utilizing a crypto-processor on the smart card.  
     
     
         7 . The method of  claim 1  wherein providing a crytographic token interface further comprises providing functionality for at least one of the group comprising general purpose functions, token management functions, session management functions, object management functions, encryption/decryption functions, message digesting functions, signing and MAC (media access controller) functions, functions for verifying signatures and MACs, dual-purpose cryptographic functions, key management functions, and random number generation functions.  
     
     
         8 . A system for enhancing security in wireless stations of a local area network (LAN), the system comprising: 
 a wireless station, the wireless station utilizing a smart card to store sensitive data; and    a host, the host providing a cryptographic token interface for performing cryptographic operations with the sensitive data from the wireless station.    
     
     
         9 . The system of  claim 8  wherein the wireless station utilizing a smart card further stores sensitive data of a chosen authentication method for the WLAN.  
     
     
         10 . The system of  claim 9  wherein the sensitive data further comprises a supplicant private key, a public key of a root certificate authority, and a premaster secret for an EAP-TLS authentication method.  
     
     
         11 . The system of  claim 9  wherein the sensitive data further comprises static WEP keys and a preshared key (PSK) for non-enterprise WLANs.  
     
     
         12 . The system of  claim 8  wherein the wireless station further utilizes a smart card for random number generation.  
     
     
         13 . The system of  claim 8  wherein the wireless station further utilizes a crypto-processor on the smart card.  
     
     
         14 . The system of  claim 8  wherein the host providing a crytographic token interface further provides functionality for at least one of the group comprising general purpose functions, token management functions, session management functions, object management functions, encryption/decryption functions, message digesting functions, signing and MAC (media access controller) functions, functions for verifying signatures and MACs, dual-purpose cryptographic functions, key management functions, and random number generation functions.  
     
     
         15 . A method for enhancing security in wireless stations of a local area network (LAN), the method comprising: 
 storing sensitive data of a chosen authentication method for a WLAN on a smart card; and    utilizing the smart card in a wireless station of the WLAN for secure access to a host of the WLAN.    
     
     
         16 . The method of  claim 15  wherein storing sensitive data further comprises storing a supplicant private key, storing a public key of a root certificate authority, and storing a premaster secret for an EAP-TLS authentication method.  
     
     
         17 . The method of  claim 15  wherein storing sensitive data further comprises storing static WEP keys and a preshared key (PSK) for non-enterprise WLANs.  
     
     
         18 . The method of  claim 15  further comprising utilizing a crypto-processor on the smart card.  
     
     
         19 . The method of  claim 15  further comprising providing a cryptographic token interface in the host for performing cryptographic operations with the wireless station.  
     
     
         20 . The method of  claim 19  wherein providing a cryptographic interfaces further comprises providing functionality for at least one of the group comprising general purpose functions, token management functions, session management functions, object management functions, encryption/decryption functions, message digesting functions, signing and MAC (media access controller) functions, functions for verifying signatures and MACs, dual-purpose cryptographic functions, key management functions, and random number generation functions.